I vote +1 (non-binding) [OK] Download all staged artifacts under the url specified in the release vote email. [OK] Verify the signature is correct. [OK] Check if the signature references an Apache email address. [OK] Verify the SHA512 hashes. [OK] Unzip the archive. [OK] Verify the existence of LICENSE, NOTICE, README, RELEASE_NOTES files in the extracted source bundle. [OK] Verify the content of LICENSE, NOTICE, README, RELEASE_NOTES files in the extracted source bundle. [OK] Run RAT and check output. [OK] Build the project with "mvn install" (Linux Mint 19.03).
Niklas Am 30.03.20 um 09:27 schrieb Lukas Ott: > +1 (binding) > > Lukas > > [OK] Download all staged artifacts under the url specified in the release > vote email into a directory we’ll now call download-dir > [OK] Verify the signature is correct: Additional Apache tutorial on how to > verify downloads can be found here. > [OK] Check if the check is successful. > [OK] Check if the signature references an Apache email address. > [OK] Verify the SHA512 hashes: > [OK] Unzip the archive: > [OK] Verify the existence of LICENSE, NOTICE, README, RELEASE_NOTES files > in the extracted source bundle. > [OK] Verify the content of LICENSE, NOTICE, README, RELEASE_NOTES files in > the extracted source bundle. > (Especially pay attention to the year in the NOTICE file if this is the > first release of the year) > [OK] [RM] Build the project with "mvn install" on Ubuntu 19.10
